使用okhttp3,提示【clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+】

1.环境

jdk: 1.8.0_251 及以上版本 、okhttp:4.10.0-RC1

2.错误

Exception in thread "main" java.lang.UnsupportedOperationException: clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+
	at okhttp3.internal.platform.Jdk9Platform.trustManager(Jdk9Platform.kt:61)
	at okhttp3.OkHttpClient$Builder.sslSocketFactory(OkHttpClient.kt:751)

3.代码

OkHttpClient okHttpClient = new OkHttpClient.Builder()
                .sslSocketFactory(SSLSocketClient.getSSLSocketFactory())
                 .build();

4.错误分析

查看sslSocketFactory(sslSocketFactory: SSLSocketFactory)的源码可以发现执行 Platform.get()时，这个get()方法会返回 Platform对象。

查看 Platform对象的定义，使用了findPlatform()方法。

在我使用jdk8的正常情况下，不需要返回期中的任何一个子类，它却在1.8.0_251及以上版本返回了Jdk9Platform对象。

sslSocketFactory(sslSocketFactory: SSLSocketFactory)执行调用 Platform.get().trustManager()，

发生了错误clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+。

5.解决方法

 ①降级至jdk1.8.0_251之前版本 (不推荐)。

 ②调用sslSocketFactory时候传入trustManager(推荐)。

        OkHttpClient okHttpClient = new OkHttpClient.Builder()
//                .sslSocketFactory(SSLSocketClient.getSSLSocketFactory())
                .sslSocketFactory(SSLSocketClient.getSSLSocketFactory(),SSLSocketClient.getX509TrustManager())
                .build();

sslSocketFactory(sslSocketFactory: SSLSocketFactory,trustManager: X509TrustManager）源码

 SSLSocketClient工具类

package org.example.aaa;

import javax.net.ssl.*;
import java.security.KeyStore;
import java.security.SecureRandom;
import java.security.cert.X509Certificate;
import java.util.Arrays;

public class SSLSocketClient {

    //获取这个SSLSocketFactory
    public static SSLSocketFactory getSSLSocketFactory() {
        try {
            SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, getTrustManager(), new SecureRandom());
            return sslContext.getSocketFactory();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    //获取TrustManager
    private static TrustManager[] getTrustManager() {
        return new TrustManager[]{
                new X509TrustManager() {
                    @Override
                    public void checkClientTrusted(X509Certificate[] chain, String authType) {
                    }

                    @Override
                    public void checkServerTrusted(X509Certificate[] chain, String authType) {
                    }

                    @Override
                    public X509Certificate[] getAcceptedIssuers() {
                        return new X509Certificate[]{};
                    }
                }
        };
    }

    //获取HostnameVerifier
    public static HostnameVerifier getHostnameVerifier() {
        return (s, sslSession) -> true;
    }

    public static X509TrustManager getX509TrustManager() {
        X509TrustManager trustManager = null;
        try {
            TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
            trustManagerFactory.init((KeyStore) null);
            TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();
            if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {
                throw new IllegalStateException("Unexpected default trust managers:" + Arrays.toString(trustManagers));
            }
            trustManager = (X509TrustManager) trustManagers[0];
        } catch (Exception e) {
            e.printStackTrace();
        }

        return trustManager;
    }
}